evil-winrm: fix OpenSSL 3 error

[D3vil0p3r]

Fixing the issue linked in #3593 by enabling legacy protocols that Evil-WinRM uses for attacking the target machine. The issue is solved by enabling the legacy protocols after the pkg installation that have been kept disabled by default by OpenSSL maintainers with the latest OpenSSL version.

[noraj]

You could try adding openssl-1.1 in dependency but with both 1.1 and 3.0 installed, idk how it will behave.

[D3vil0p3r]

You could try adding openssl-1.1 in dependency but with both 1.1 and 3.0 installed, idk how it will behave.

I tried to install openssl-1.1 package, but when I run evil-winrm we still get the famous error. So, it still refers to the OpenSSL 3.0 config file.

[noraj]

If you take a look at evil-winrm gemspec https://github.com/Hackplayers/evil-winrm/blob/381b126d6a8dc3ca38f7fab73cb80175fcbe8d45/evil-winrm.gemspec#L27, it relies on the winrm gem.

I suggest you open a bug request upstream for openssl 3.0 support.

[D3vil0p3r]

If you take a look at evil-winrm gemspec https://github.com/Hackplayers/evil-winrm/blob/381b126d6a8dc3ca38f7fab73cb80175fcbe8d45/evil-winrm.gemspec#L27, it relies on the winrm gem.

I suggest you open a bug request upstream for openssl 3.0 support.

Opened to WinRb/WinRM#340

[noraj]

By reading WinRb/WinRM#340, I think we can make a workaround.

1. add openssl-1.1 in the dependencies

   blackarch/packages/evil-winrm/PKGBUILD

   Line 14 in ff5e86d

   depends=('ruby' 'ruby-bundler' 'libxslt' 'ruby-rexml' 'git')

2. Modify the wrapper to add an inline OPENSSL_CONF in the wrapper exec OPENSSL_CONF=/path/to/customconf bundle exec $pkgname.rb "\$@"

   blackarch/packages/evil-winrm/PKGBUILD

   Lines 42 to 46 in ff5e86d

   	cat > "$pkgdir/usr/bin/$pkgname" << EOF
   	#!/bin/sh
   	cd /usr/share/$pkgname
   	exec bundle exec $pkgname.rb "\$@"
   	EOF

   and setting the path to openssl 1.1 conf.

or maybe better so there is no need of openssl 1.1.1

1. only add openssl (3.0) in the dependencies
2. Modify the wrapper to add an inline OPENSSL_CONF, copy openssl 3.0 conf in /usr/share/$pkgname, sed the required modifications and set OPENSSL_CONF to use the custom file